Error: rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl: RFC 5280, section 5.1.2.6: revoked certificate list without entries disallowed

Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
File:                     E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft (raw, json)
Hash identifier:          Qeos4PdaV3IlWViREmiuKD0sayhriyzIEgY4BeIO6Mk=
Subject key identifier:   CD:45:ED:DF:EF:7D:3B:3A:90:80:DC:2E:D1:EE:4B:39:14:33:F1:5C
Authority key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Certificate issuer:       /CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
Certificate serial:       5105E9DDF426D811215EC03E7A02521F946B614C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
Manifest number:          048A
Signing time:             Fri 21 Aug 2026 11:09:04 +0000
Manifest this update:     Fri 21 Aug 2026 11:04:04 +0000
Manifest next update:     Sat 22 Aug 2026 12:18:04 +0000
Files and hashes:         1: E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl (hash: npuyEAAasCZyk48hKTzBn+ess+FEBDEcM/Jh/QdLfns=)
                          2: 34352e3136312e3231322e302f32342d3234203d3e20323638353133.roa (hash: 0OB/cBih5lwu+ma04lWdjF5MShMFx59uEVd4jn/euHs=)
                          3: 323830343a353235633a3a2f33332d3333203d3e2030.roa (hash: WL9i5Kk9FaLCbWrUKUtLGG5AfhY3ikXTGFmGlbLhI04=)
                          4: 34352e3136312e3231322e302f32332d3233203d3e2030.roa (hash: HvKtSw8emQio/y8tfe1PnEtLVhAXda2VgI0jK7OzecI=)
                          5: 34352e3136312e3231342e302f32342d3234203d3e20323638353133.roa (hash: D5agjyjCwBe5ipn5oLEjv+NdMpMDeiMPvSCYkkAoptY=)
                          6: 323830343a353235633a383030303a3a2f33362d3336203d3e20323638353133.roa (hash: UY2QbhpkISjCA3AFXZBdWR/pbLj8cWu4NUWSln5m6mU=)
                          7: 34352e3136312e3231352e302f32342d3234203d3e20323732343433.roa (hash: s985lYOAeCG1P7p/s08n1ScMtbbUjTFxY9tO8cBpFm8=)
                          8: 34352e3136312e3231342e302f32332d3233203d3e20323638353133.roa (hash: LWtn9kErVuu5pNdk9wV+iL95RufgUl43obPKcEBU1m4=)
                          9: 323830343a353235633a393038303a3a2f34312d3431203d3e20323638353133.roa (hash: CmV/YuDsDDlHPRNa83n51OmtymaluxKms/I1QW1WhOU=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl
                          rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Aug 2026 12:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:05:e9:dd:f4:26:d8:11:21:5e:c0:3e:7a:02:52:1f:94:6b:61:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Validity
            Not Before: Aug 21 11:04:04 2026 GMT
            Not After : Aug 22 12:18:04 2026 GMT
        Subject: CN=CD45EDDFEF7D3B3A9080DC2ED1EE4B391433F15C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:e0:16:10:dd:5b:1e:8c:8d:65:68:6f:af:
                    2c:41:41:18:2b:fb:a7:27:c9:e8:e7:f6:99:69:85:
                    b7:54:1d:59:db:06:90:9b:8e:ca:73:78:9c:05:ab:
                    52:b3:04:f5:26:49:4b:a9:fa:7e:5f:f1:32:14:6c:
                    1b:b2:20:d8:ab:2a:13:4f:82:07:72:e6:b7:d0:0f:
                    10:f6:d7:4f:0e:7b:da:20:07:a0:c8:35:1d:81:39:
                    5e:72:93:72:c2:38:87:84:d1:9d:da:b8:35:19:8f:
                    87:6b:b7:43:b0:d9:f9:d7:3c:ec:42:8b:b8:b2:3f:
                    98:bb:ef:c0:47:e3:c9:7b:51:67:31:42:3a:21:92:
                    9f:8c:e4:a0:a8:73:0f:2e:2d:81:da:18:75:79:52:
                    41:50:34:89:7d:9b:9a:bd:17:c9:d5:db:d5:4f:e6:
                    fc:f2:06:ba:ed:d7:6d:bd:14:6c:a1:cb:db:9f:37:
                    91:e2:02:ab:b7:8d:85:64:0a:09:f1:3d:93:f8:c8:
                    f8:e0:ad:71:8d:e3:c2:c0:c3:b8:50:05:81:30:dc:
                    10:a9:87:da:80:6d:c9:47:82:d3:cf:f5:5d:85:70:
                    dd:17:06:b3:9c:0c:cb:58:61:52:21:5e:ab:d1:42:
                    48:2e:51:bd:c7:0a:7c:ef:8a:d9:91:4c:c2:88:13:
                    65:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:45:ED:DF:EF:7D:3B:3A:90:80:DC:2E:D1:EE:4B:39:14:33:F1:5C
            X509v3 Authority Key Identifier:
                keyid:E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:60:b6:12:54:c1:8f:ec:83:69:03:a1:a9:b3:9f:ae:47:1d:
         73:fa:75:8b:6f:83:d8:04:e2:3b:e7:49:fd:dd:54:b2:75:23:
         ca:03:5d:d9:70:0d:cd:57:7d:ac:73:5a:66:87:a7:07:7b:44:
         f6:d8:62:78:2b:53:19:71:18:e3:0f:39:be:6b:78:36:d3:9c:
         7c:c4:8c:c0:77:74:04:a4:10:d4:06:40:da:7c:7a:57:39:0f:
         7f:d4:2d:f8:d8:70:7f:aa:4f:dd:93:37:54:dc:31:e1:ec:12:
         5f:62:77:ae:53:bf:bf:08:b7:4c:1d:c7:c7:d4:6d:bc:8d:f9:
         bc:48:1e:39:af:3e:f8:b3:5a:51:c7:f7:6d:22:b4:87:9e:61:
         c9:54:03:0e:8e:c4:44:6b:90:b3:16:70:72:ea:cd:75:16:b3:
         19:da:c3:99:1b:ac:3b:90:aa:4c:83:9d:c9:6a:42:a0:3c:2d:
         bf:4d:fd:04:1d:d1:7e:c9:9d:53:df:3d:ec:2b:b5:1c:5b:12:
         8f:36:4e:a4:aa:51:ab:c8:19:62:01:3e:4a:d0:1a:52:e0:dc:
         75:e8:10:c1:a8:b5:d2:f1:27:61:c5:18:3e:65:e1:5a:02:60:
         1d:fe:03:67:5b:e5:6e:bc:cb:1b:ce:3a:6b:ed:41:d6:31:29:
         9f:16:96:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:54:17 2026 by rpki-client